high8.8
CVE-2023-39435
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stac…
Impact
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zavio | Cf7500 Firmware | Version m2.1.6.05 |
| Zavio | Cf7300 Firmware | Version m2.1.6.05 |
| Zavio | Cf7201 Firmware | Version m2.1.6.05 |
| Zavio | Cf7501 Firmware | Version m2.1.6.05 |
| Zavio | Cb3211 Firmware | Version m2.1.6.05 |
| Zavio | Cb3212 Firmware | Version m2.1.6.05 |
| Zavio | Cb5220 Firmware | Version m2.1.6.05 |
| Zavio | Cb6231 Firmware | Version m2.1.6.05 |
| Zavio | B8520 Firmware | Version m2.1.6.05 |
| Zavio | B8220 Firmware | Version m2.1.6.05 |
| Zavio | Cd321 Firmware | Version m2.1.6.05 |